yes thats what i entered for the tunable. thanks for your help!

@tumanator: honestly I'm just not sure yet what I'm trying to do myself. Until you work that out (and why you want to do what you decided) why not run a configuration with just one public IP on the WAN side, private IP addresses on LAN and OPT1 and port forwarding through the firewall? This would give you some experience with pfSense and that may help you decide what you really want to do.

thanks for the reply ill check it out

http://snapshots.pfsense.org/

Those are setting's he is (now successfully) mimicking on pfSense. Steve

@GruensFroeschli: Afaik you should be able to restore a config.xml from monowall directly on the pfSense and have everything moved over. Yes, it is in xml file but import not working as it should - after import "unable to find uid for XXX" error flashes during the initial boot. I dont want to force users to retype passwords.

Do have to reboot after making the change because it's still not working???  if so I haven't had a chance to do it yet I will reboot it later today Tim

Many thanks for all your answers I really have learned a lot. My solution is just to not do to have the all-in-one machine. The penalty in either security or performance is too big. I have ordered an Alix 2D2 (for firewall+router) and it will sit beside my Openvox in the IX110 housing. On a side note: I did install some services using jails on pfSense just for now (it is not connected the modem yet :)) just to get some experience. I can really say that I love pfSense and FreeBSD. I didn't have any experience with any of the BSDs but it feels so much more solid than linux (or windows).

I download and copying the dom.so from php52-dom-xxx package. Do not use other package like php5-dom-xxx Bye  :D

@cenriq: Is there any way to do remote administration on the system? That's what I am searching on now. Thaks for your support. As dotdash stated, enable SSH and HTTPS under Settings->Advanced in the menus. What he didn't mentioned was that you MUST add firewall rules on WAN tab to allow incoming connections on these ports.  To reduce SSH brute force attacks, you might want to change the default SSH port from '22' to say..  '222'. If you do not want to reveal HTTPS on your WAN, you can always do a SSH tunnel socks proxy on the client then access the HTTPS webgui via the LAN IP.

That was me  ;D The snapshots update far too often to be effectively mirrored without wasting a ton of bandwidth. Once 2.0 is released it will be a moot point. It normally isn't an issue that too many people are trying to access snapshots at the same time, since they're generally for testing. But 2.0 snapshots are just too good to pass up!

Ok, my friend. Thank you.

Have you tried a pfSense 2.0 snapshot build? Sometime newer software works better with newer hardware. A while back I had trouble usb USB devices on a motherboard with AMD 780G chipset and snpshot builds of pfSense 1.2.3. A few months later the problem didn't happen with the released version of 1.2.3.

I've found two possibilites: After initial installation, first time you enter to webui and go through the wizard or in the webui System->Routing and there is first the first tab, after that don't forget to take it in use

I need a workable solution to install 2RC1. Help please?

I rolled back the bios and still continued to have issues. I followed the boot troubleshooting doc but nothing helped. I've also been getting a number of other errors during the install, so I've decided to give up on this machine. I grabbed an even older IBM server that I had laying around and got pfSense up and running on it in no time at all.